What is the official website of U.S. Consulate General Mumbai ?

The official website of U.S. Consulate General Mumbai is https://in.usembassy.gov/embassy-consulates/mumbai/.

What is U.S. Consulate General Mumbai's cybersecurity risk score?

U.S. Consulate General Mumbai has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Consulate General Mumbai experienced?

According to Rankiteo, U.S. Consulate General Mumbai currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Consulate General Mumbai been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Consulate General Mumbai has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Consulate General Mumbai have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Consulate General Mumbai is not certified under SOC 2 Type 1.

Does U.S. Consulate General Mumbai have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Consulate General Mumbai does not hold a SOC 2 Type 2 certification.

Does U.S. Consulate General Mumbai comply with GDPR ?

According to Rankiteo, U.S. Consulate General Mumbai is not listed as GDPR compliant.

Does U.S. Consulate General Mumbai have PCI DSS certification ?

According to Rankiteo, U.S. Consulate General Mumbai does not currently maintain PCI DSS compliance.

Does U.S. Consulate General Mumbai comply with HIPAA ?

According to Rankiteo, U.S. Consulate General Mumbai is not compliant with HIPAA regulations.

Does U.S. Consulate General Mumbai have ISO 27001 certification ?

According to Rankiteo,U.S. Consulate General Mumbai is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Consulate General Mumbai operate in ?

U.S. Consulate General Mumbai operates primarily in the Government Administration industry.

How many employees does U.S. Consulate General Mumbai have ?

U.S. Consulate General Mumbai employs approximately 106 people worldwide.

Does U.S. Consulate General Mumbai own any subsidiaries ?

U.S. Consulate General Mumbai presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Consulate General Mumbai have ?

U.S. Consulate General Mumbai's official LinkedIn profile has approximately 25,056 followers.

What is the NAICS classification code for U.S. Consulate General Mumbai ?

U.S. Consulate General Mumbai is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Consulate General Mumbai have a Crunchbase profile ?

No, U.S. Consulate General Mumbai does not have a profile on Crunchbase.

Does U.S. Consulate General Mumbai have a LinkedIn profile ?

Yes, U.S. Consulate General Mumbai maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/u-s-consulate-general-mumbai.

How many cybersecurity incidents has U.S. Consulate General Mumbai experienced ?

As of August 10, 2026, Rankiteo reports that U.S. Consulate General Mumbai has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Consulate General Mumbai have ?

U.S. Consulate General Mumbai has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Consulate General Mumbai faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCGM

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

U.S. Consulate General Mumbai Vendor Cyber Rating & Cyber Score

usembassy.gov

Add Your Compliance Badge

Welcome to the official LinkedIn page of the Consulate General of the United States in Mumbai, a resource for you to connect with us, learn about #USIndia economic partnerships, engage with our visiting experts on wide-ranging topics such as entrepreneurship, innovation, the environment, trade, and learn about the latest career opportunities. Join us as we represent the American people abroad, advocate for U.S. interests in Western India, and strengthen the U.S. – India bilateral relationship. Terms of use: http://state.gov/tou

UCGM A.I CyberSecurity Scoring

Scoring History

UCGM

U.S. Consulate General Mumbai CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Consulate Gene...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UCGM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCGM

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General Mumbai in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Consulate General Mumbai in 2026.

Incident Types UCGM vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General Mumbai in 2026.

Incident History - UCGM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Consulate General Mumbai Subsidiaries

UCGM

Government Administration

Website: https://in.usembassy.gov/embassy-consulates/mumbai/

Company Size: 106

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

U.S. Embassy Amman, JordanGovernment Relations Services

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy ZambiaInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

Bureau of Cyberspace and Digital PolicyInternational Affairs

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Embassy TunisGovernment Administration

Diplomatic Security ServiceLaw Enforcement

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy ParisGovernment Administration

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy Montevideo, UruguayGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Consulate General MilanGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

US BotschaftGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

US Mission to the UN Agencies in RomeGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Consulate General FrankfurtGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

National Museum of American DiplomacyGovernment Administration

U.S. Mission ThailandGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

U.S. Embassy in the Dominican RepublicGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Foreign Service InstituteInternational Affairs

U.S. Embassy PanamaGovernment Administration

U.S. Embassy in San SalvadorGovernment Administration

U.S. Embassy JakartaGovernment Administration

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy South AfricaGovernment Relations Services

U.S. Embassy in AustraliaInternational Affairs

Ambassador Michael BattleGovernment Relations Services

Embassy of the United States of America, LondonGovernment Relations

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

DT - Diplomatic Technology at StateInternational Affairs

U.S. Embassy and Consulates in Brazil Government Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

Loading…

U.S. Consulate General Mumbai Similar Companies

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

City of Philadelphia

phila.gov

With a workforce of 30,000 people, and opportunities in 1,000 different job categories, the City of Philadelphia is one of the largest employers in Southeastern Pennsylvania. As an employer, we operate through the guiding principles of service, integrity, respect, accountability, collaboration, diversity and inclusion. We strive to effectively deliver services, to resolve the challenges facing our city, and to make Philadelphia a place where all of our residents have the opportunity to reach their potential. To learn more about job opportunities, visit www.phila.gov or follow #PHLCityJobs.

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

Belastingdienst

belastingdienst.nl

De organisatie bestaat uit diverse onderdelen, waaronder de Belastingdienst, Douane, Toeslagen, FIOD en enkele facilitaire organisaties. Met ruim 30.000 medewerkers werken we in kantoren die verspreid zijn over het hele land. Gezamenlijk heffen, innen en controleren we belastingen. Daarnaast zorgen we ook voor het uitbetalen van toeslagen. En zijn we verantwoordelijk voor douanetaken en het opsporen van fraude. De Belastingdienst is een organisatie die 24 uur per dag, 7 dagen per week in dienst staat van de samenleving. Waar jaarlijks miljoenen aangiften worden behandeld, en waar voor honderden miljoenen aan toeslagen worden uitbetaald. En waar de Douane dagelijks zorgt voor de vlotte en veilige in- en uitvoer van tonnen goederen. Ondanks deze grote aantallen streven wij waar mogelijk naar individuele en persoonlijke dienstverlening. En in de vorm van bijvoorbeeld convenanten en partnerships werken wij ook zo goed mogelijk samen met het bedrijfsleven en andere ketenpartners. De Belastingdienst: grootschalig, veelzijdig en altijd maatschappelijk relevant.

State of Oregon

cb oregon.gov

Official LinkedIn page for the state of Oregon. Oregon is a state in the Pacific Northwest region of the United States. It is located on the Pacific coast, with Washington to the north, California to the south, Nevada on the southeast and Idaho to the east. The Columbia and Snake rivers delineate much of Oregon's northern and eastern boundaries, respectively. The area was inhabited by many indigenous tribes before the arrival of traders, explorers, and settlers who formed an autonomous government in Oregon Country in 1843. The Oregon Territory was created in 1848, and Oregon became the 33rd state on February 14, 1859.

State of Indiana

IN.gov

State government is more than senators, representatives, and elected officials. We build highways, provide drivers licenses, protect our children and vulnerable populations, create jobs, connect Hoosiers to job opportunities, maintain state parks, train law enforcement officers, and we run museums and hospitals. We also provide unemployment insurance, disability, and workers compensation, among countless other services. We're 30,000 strong and still have more work to do. Find out where you fit with us at WorkForIndiana.IN.gov.

City of Amsterdam

amsterdam.nl

Working for Amsterdam means working for the most beautiful city in the world. Think of its rich history, the role Amsterdam plays internationally, and events such as Sail, Gay Pride and King’s Day. Of course everybody wants to visit Amsterdam, or work or live here. As you can probably imagine, working for Amsterdam is a challenge every day. How do we handle the growing bustle in the inner city? Or the high demand for new homes? Or obesity among young children? At the municipality of Amsterdam we work daily on challenging projects like these. Good for Amsterdam, good for you Each field of work, ranging from social affairs, customer and information services to environmental planning and economy, has its own challenges. You have to deal with the interests of many parties, often conflicting. Each day you will be looking for solutions that suit the needs of residents, entrepreneurs and visitors. This can make working for the city difficult sometimes, but it is what characterises the job. We work in an open, active, honest, ethical and fair manner, so that is what we would expect from you as well.

Government of Canada

canada.ca

The Government of Canada works on behalf of Canadians, both at home and abroad. Visit www.Canada.ca to learn more. Canada’s professional, non-partisan public service is among the best in the world, and many of its departments and agencies place in Canada’s Top 100 Employers year after year. If you are interested in joining our diverse and innovative team, visit www.jobs.gc.ca for information and opportunities. Terms: https://www.canada.ca/en/transparency/terms.html Le gouvernement du Canada œuvre au nom des Canadiens, tant au pays qu’à l’étranger. Consultez le site www.canada.ca pour en savoir plus. Impartiale et professionnelle, la fonction publique du Canada fait partie de l’élite mondiale. Bon nombre de ses ministères et organismes figurent parmi les 100 meilleurs employeurs du pays année après année. Vous aimeriez intégrer notre équipe diversifiée et innovante? Rendez-vous au www.emplois.gc.ca pour obtenir des informations et connaître les possibilités qui s’offrent à vous. Avis : https://www.canada.ca/fr/transparence/avis.html

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

Loading…

NEWS

U.S. Consulate General Mumbai CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 20, 2025 08:00 AM

US Visa Interviews: Waiting stretches to months, Govt admits

The “predicted waiting period” for availing a visa interview appointment as of November 20 at the US Embassy here for business or tourist...

Read Article

December 11, 2025 08:00 AM

US Consulates in India Conduct Mass Rescheduling of Visa Appointments as New Screening Rules Launch

US consulates in India begin cancelling and automatically rescheduling H-1B and H-4 visa appointments over online presence and social media...

Read Article

December 07, 2025 08:00 AM

Telangana woman Sahaja Reddy dies in US fire accident; Indian Consulate in New York offers condolences

The Indian Consulate in New York expressed condolences for Sahaja Reddy Udumala, a 24-year-old cybersecurity professional who died in a...

Read Article

December 06, 2025 08:00 AM

Who was Sahaja Udumala? 24-year-old Indian dies in New York. Here's what happened

Sahaja Reddy Udumala, a 24-year-old cybersecurity professional from Telangana has died in a fire accident in the United States,...

Read Article

December 04, 2025 08:00 AM

Your LinkedIn profile is now evidence - Trump expands H-1B visa screening for censorship work

The Trump administration has ordered a sweeping new vetting regime for H-1B visa applicants, directing US consular officers to scrutinise...

Read Article

October 03, 2025 07:00 AM

US government shutdown: US Embassy in India announces its Twitter account will not be updated regularly u

Tech News News: The US government has shut down for the first time in nearly seven years after Republicans and Democrats failed to agree on...

Read Article

July 24, 2025 07:00 AM

Storks deliver an angel on AI Express Muscat-Mumbai flight

India Business News: An Air India Express flight from Muscat to Mumbai witnessed the birth of a healthy baby mid-air.

Read Article

June 29, 2025 07:00 AM

F-1 visa denied in seconds: Indian student shares shocking experience on Reddit

A young Indian aspirant seeking to pursue higher education in the United States was denied an F-1 student visa at the US Consulate in Chennai on June 24, 2025.

Read Article

June 20, 2025 07:00 AM

Boycott call at Reliance Smart in Hyderabad over ties with Israel

A pro-Palestine protest was held at a Reliance outlet in Tarnaka on Friday, calling for a boycott of the retail company.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…